Florist Peckham Privacy Policy Statement

Introduction

This Privacy Policy explains how Florist Peckham collects, uses, stores, and protects your personal information when you place an order with us. The policy applies to all customers placing orders from Peckham and surrounding districts. Our privacy practices comply with the UK General Data Protection Regulation (GDPR), ensuring your data is handled with care and transparency.

Scope of This Policy

This policy applies to all personal data collected from individuals ordering flowers or related products and services from Florist Peckham, whether you place your order online, over the phone, or in person, as long as you are ordering from Peckham or surrounding districts.

What Data We Collect

When you interact with Florist Peckham to place an order, we may collect the following categories of personal information:

  • Contact Information: name, delivery address, billing address, phone number
  • Order Details: items ordered, delivery instructions, occasion (e.g., birthday, anniversary)
  • Payment Information: limited data such as payment method type. Full card details are not stored by Florist Peckham but may be processed by our payment providers.
  • Recipient Information: name, delivery address, and phone number of the recipient if different from the customer
  • Communication Records: correspondence regarding orders, feedback, or customer service requests
  • Technical Information: IP address, browser type, device type, and cookies, when you use our website

Lawful Basis for Processing Your Data

Florist Peckham processes your personal data based on one or more of the following lawful bases, as defined by the GDPR:

  • Contract: Processing is necessary for the performance of a contract with you, such as fulfilling your flower order and managing payments.
  • Legal Obligation: We may process your data if required to comply with regulatory or legal obligations.
  • Legitimate Interests: We may process data where it is in our legitimate interests, for example to improve our services, prevent fraud, or ensure network security, provided these interests do not override your fundamental rights.
  • Consent: In certain situations, such as for marketing communications, we will only process your data with your explicit consent. You can withdraw consent at any time.

How We Use Your Information

We use your personal information to:

  • Process, confirm, and deliver your orders
  • Communicate with you about your orders, including order updates and customer service
  • Respond to your feedback, queries, or requests
  • Personalise your experience and suggest relevant products
  • Comply with applicable laws and regulations
  • Analyse and improve our products and services

Data Retention

We retain personal data only as long as necessary to fulfill the purposes described in this policy, and as required by law. Typically, we retain order-related data for up to seven years to comply with accounting and legal obligations. Where data is no longer required, it will be securely deleted or anonymised.

Data Processors and Third Parties

Florist Peckham may engage third-party service providers to assist with processing payments, delivering orders, managing IT infrastructure, or analyzing site usage. These service providers act strictly on our instructions and are contractually bound to comply with GDPR requirements and protect your data.

No personal data is sold to other businesses or organizations. Data may be shared with authorities if legally required.

Data Security Measures

We take the security of your data seriously. Physical, electronic, and procedural safeguards are in place to protect your personal information from unauthorized access, loss, or misuse. Access to personal data is limited to staff and trusted processors who require it to perform their duties.

Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right to Access: You may request a copy of your personal data held by Florist Peckham.
  • Right to Rectification: You can have inaccurate or incomplete data corrected.
  • Right to Erasure: Also known as ‘the right to be forgotten,’ you may request deletion of your personal data, unless we have a legal obligation to retain it.
  • Right to Restrict Processing: You may request that we limit processing of your personal data in certain circumstances.
  • Right to Data Portability: You may request transfer of your data to another provider, where technically feasible.
  • Right to Object: You can object to processing where it is based on legitimate interests or direct marketing.
  • Right to Withdraw Consent: Where we process your data based on consent, you have the right to withdraw your consent at any time.

To exercise any of these rights, you may contact us using the communication methods provided in your order confirmation or on our website.

Policy Updates

Florist Peckham may update this Privacy Policy from time to time to reflect changes in laws or our practices. Significant changes will be communicated to customers as appropriate. Continued use of our services after policy updates constitutes acceptance of those changes.

Contact and Complaints

If you have any concerns about how your personal data is used, or if you wish to make a complaint, you can contact Florist Peckham using the contact options provided on your order documents or our website. You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your rights under GDPR have been infringed.

Effective Date

This Privacy Policy is effective as of 31 May 2024.